CVE-2026-58596

Analyzed Analyzed - Analysis Complete

Untrusted Pointer Dereference in Microsoft Edge

Publication date: 2026-07-12

Last updated on: 2026-07-14

Assigner: Microsoft Corporation

Description

Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-12

Last Modified

2026-07-14

Generated

2026-08-01

AI Q&A

2026-07-12

EPSS Evaluated

2026-07-31

NVD

CVE-2026-58596

EUVD

EUVD-2026-43239

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	edge_chromium	to 150.0.4078.48 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-822	The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

Attack-Flow Graph

Executive Summary

This vulnerability is an untrusted pointer dereference in Microsoft Edge (Chromium-based). It allows an unauthorized attacker to elevate their privileges over a network.

Impact Analysis

The vulnerability can allow an attacker to gain elevated privileges remotely, which means they could perform actions with higher permissions than intended, potentially compromising the security and integrity of your system.

Mitigation Strategies

To mitigate this vulnerability, it is recommended to apply the security updates provided by Microsoft for Microsoft Edge (Chromium-based) as soon as possible.

Since the vulnerability allows elevation of privilege over a network, ensuring that Microsoft Edge is updated to the latest patched version will help prevent exploitation.

Hi! I’m here to help you understand CVE-2026-58596. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70